[HIVE-2768] Add a getAuthorizationProvider to HiveStorageHandler

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.9.0
• Component/s: HBase Handler
• Assignee: Francis Christopher Liu
• Reporter: Alan Gates
• Created: 31/Jan/12 21:40
• Updated: 09/Jan/13 10:23
• Resolved: 23/Feb/12 21:34

Description

In version 0.92 HBase supports ACLs for tables. In HCatalog, since we delegate security to the underlying storage layer, we would like to be able to obtain a HiveAuthorizationProvider specific to a HiveStorageHandler instance. This can be done by adding a getAuthorizationProvider method to HiveStorageHandler. In the case where Hive is configured to use the DefaultHiveAuthorizationProvider this call will return the same default provider, since Hive handles all of the authorization itself in that case. In the case where it is configured to use the HCatAuthorizationProvider, it would return an instance specific to the underlying storage.

For more background on this proposed change see HCATALOG-237 and https://cwiki.apache.org/confluence/display/HCATALOG/Hcat+Security+Design

Issue Links

• is part of: HCATALOG-237 Switch from using StorageDrivers to SerDes to do data (de)serialization
• is related to: HIVE-2809 StorageHandler authorization providers